Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
File:                     hgOgrKcgSw7-1k23DeUcdboDk1U.mft (raw, json)
Hash identifier:          8exMtO4VkxHW2uG8vBIT2tnd65/lSnd7u/M2UTyGcPU=
Subject key identifier:   84:93:F4:4A:E4:0C:00:05:4A:13:A2:A1:E1:14:00:3E:EA:08:81:1A
Authority key identifier: 86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
Certificate issuer:       /CN=A9118EB2/serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Certificate serial:       035F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
Manifest number:          0346
Signing time:             Wed 25 Mar 2026 00:44:31 +0000
Manifest this update:     Wed 25 Mar 2026 00:44:31 +0000
Manifest next update:     Wed 01 Apr 2026 00:44:31 +0000
Files and hashes:         1: hgOgrKcgSw7-1k23DeUcdboDk1U.crl (hash: TYKYEOO2Ipt5sSZdzETyPQGVFdkD227CGWDE2l6Mcko=)
                          2: 673C2B68A8BA11F096079D46C4F9AE02.roa (hash: iAesf40760Ge7OkqHg9mpMk5sp26zXObALVRo0oegXY=)
                          3: 208C7D2E066C11EDB31C2239C4F9AE02.roa (hash: 384lM558CG+awOCq+Jp4xJkMm0eBCvPqegdL9GG+nvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
                          rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863 (0x35f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118EB2, serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
        Validity
            Not Before: Mar 25 00:44:31 2026 GMT
            Not After : Apr  1 00:44:31 2026 GMT
        Subject: CN=69c32fef-2694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:df:31:2e:ab:99:6b:8d:00:c1:00:4c:b6:
                    b2:35:a9:10:46:ad:af:2e:26:be:59:3f:42:b4:1d:
                    00:e5:36:8d:9b:46:cb:22:f5:a3:31:ef:b5:1f:67:
                    75:5d:24:bb:90:a9:86:2a:8c:9b:a7:26:06:41:af:
                    49:34:65:9b:45:59:6a:bf:72:82:96:4f:07:94:d4:
                    66:88:f6:1d:9e:a8:77:6d:46:40:00:81:c7:be:bc:
                    5e:3b:44:52:46:c4:ca:6d:4a:71:72:f0:10:8d:b5:
                    52:99:06:46:c0:4a:96:f1:ad:2f:61:19:a6:8a:77:
                    27:6d:86:0c:25:25:73:66:fc:41:2c:eb:98:67:c5:
                    34:01:8b:f6:fc:c7:7c:bf:f3:33:e7:d8:b9:c7:d0:
                    ed:c3:eb:2d:5e:9e:34:ed:48:b8:67:ac:3e:36:1b:
                    af:20:21:0c:fc:6e:70:70:42:8e:8b:00:a1:d8:6f:
                    40:d1:54:bd:44:78:e5:98:d1:f7:48:e4:35:b6:c6:
                    78:80:46:d7:f1:7d:4e:27:64:47:9d:dc:1f:59:09:
                    c1:27:45:43:80:05:64:b3:64:71:81:7e:25:f3:9d:
                    f0:ec:e6:81:00:00:1a:39:7e:6d:be:90:25:f6:bd:
                    f8:69:f1:bb:e5:4f:11:55:f9:1a:63:e9:04:a0:4d:
                    e8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:93:F4:4A:E4:0C:00:05:4A:13:A2:A1:E1:14:00:3E:EA:08:81:1A
            X509v3 Authority Key Identifier:
                keyid:86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c7:43:46:c9:a7:80:f5:2e:aa:26:d8:55:89:81:89:a6:2d:
         df:e3:46:0b:7b:c5:f4:82:ed:1f:a6:ea:34:44:25:fd:d6:19:
         cf:aa:5e:f7:3c:ad:64:dc:42:45:5f:ee:98:a5:a3:90:b8:2c:
         c6:09:1c:7a:12:73:cf:88:fd:40:02:d5:72:88:0e:55:cc:46:
         6f:7c:24:1d:12:b4:db:bb:5b:7b:55:4b:5e:7a:8e:fb:60:1e:
         a1:b5:6d:b3:d9:1a:7c:85:76:d3:23:b4:88:99:dc:b6:ca:47:
         17:95:fb:6e:48:df:93:72:5d:39:bd:03:b3:f1:d3:15:2d:70:
         ee:8b:ba:47:18:80:90:86:71:95:f0:f9:ce:7d:c1:51:ab:01:
         5b:ea:7a:1a:d8:6d:be:33:53:7d:36:2f:5e:37:ea:a4:a2:1e:
         6d:ef:42:25:20:05:41:d4:63:63:ad:e4:33:c4:2b:11:b8:e1:
         4d:74:0a:77:16:26:ce:5c:62:42:ea:e2:b2:0a:7d:ce:4c:e4:
         f7:4d:6f:04:e8:7b:c0:cb:ad:9c:a3:73:c4:4d:c1:72:00:a9:
         7f:72:25:f5:28:5a:14:5f:59:65:c4:b4:f5:db:b8:4c:aa:77:
         88:51:52:79:c7:50:10:bc:57:2a:69:cf:93:d2:fe:7e:5f:b8:
         b0:1a:ef:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThFQjIxMTAvBgNVBAUTKDg2MDNBMEFDQTcyMDRCMEVGRUQ2NERCNzBERTUxQzc1
QkEwMzkzNTUwHhcNMjYwMzI1MDA0NDMxWhcNMjYwNDAxMDA0NDMxWjAYMRYwFAYD
VQQDEw02OWMzMmZlZi0yNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0KHfMS6rmWuNAMEATLayNakQRq2vLia+WT9CtB0A5TaNm0bLIvWjMe+1H2d1
XSS7kKmGKoybpyYGQa9JNGWbRVlqv3KClk8HlNRmiPYdnqh3bUZAAIHHvrxeO0RS
RsTKbUpxcvAQjbVSmQZGwEqW8a0vYRmmincnbYYMJSVzZvxBLOuYZ8U0AYv2/Md8
v/Mz59i5x9Dtw+stXp407Ui4Z6w+NhuvICEM/G5wcEKOiwCh2G9A0VS9RHjlmNH3
SOQ1tsZ4gEbX8X1OJ2RHndwfWQnBJ0VDgAVks2RxgX4l853w7OaBAAAaOX5tvpAl
9r34afG75U8RVfkaY+kEoE3odQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIST9Erk
DAAFShOioeEUAD7qCIEaMB8GA1UdIwQYMBaAFIYDoKynIEsO/tZNtw3lHHW6A5NV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEVCMi83QUM3NjdERTA2
NjkxMUVEQjBBRThFMzdDNEY5QUUwMi9oZ09ncktjZ1N3Ny0xazIzRGVVY2Rib0Rr
MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hnT2dyS2NnU3c3LTFrMjNEZVVjZGJvRGsxVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OEVCMi83QUM3NjdERTA2NjkxMUVEQjBBRThFMzdDNEY5QUUwMi9oZ09ncktjZ1N3
Ny0xazIzRGVVY2Rib0RrMVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa8dDRsmngPUuqibYVYmBiaYt3+NGC3vF9ILtH6bqNEQl/dYZz6pe9zytZNxC
RV/umKWjkLgsxgkcehJzz4j9QALVcogOVcxGb3wkHRK027tbe1VLXnqO+2AeobVt
s9kafIV20yO0iJnctspHF5X7bkjfk3JdOb0Ds/HTFS1w7ou6RxiAkIZxlfD5zn3B
UasBW+p6GthtvjNTfTYvXjfqpKIebe9CJSAFQdRjY63kM8QrEbjhTXQKdxYmzlxi
Qurisgp9zkzk901vBOh7wMutnKNzxE3BcgCpf3Il9ShaFF9ZZcS09du4TKp3iFFS
ecdQELxXKmnPk9L+fl+4sBrvCA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:46 2026 by rpki-client